Logparser mutate string

#1

Is there a way to mutate strings in the [inputs.logparser.grok] section? I’m pulling in website logs and some of our URLs contain GUIDs, I would like to replace that section of the url with different text.

I.E.
/blah/blah/ed803d5c-0e59-4da9-9625-83d27b605f6d/blah
mutates to:
/blah/blah/guid/blah

I’ve mapped the URL in custom patterns to %{URIPATH:CSURIStem:tag}

thanks
Garry

#2

No, we don’t have support for mutate yet. Could you open a new issue?

#3

hi Daniel

thanks for the reponse, I’ll open a request

thanks
Garry